Information Text:
This information text has been prepared to inform you regarding the personal and special categories of personal data that will be processed by the data controller Assoc. Prof. Dr. Erol Cansız (hereinafter referred to as the DOCTOR or the Clinic). The personal data processed by the Clinic are listed below; if personal data other than those listed are to be processed, you will be informed and your explicit consent will be obtained.

·       Your name and surname

·       Turkish Republic identification details, T.R. ID number, passport number

·       Place and date of birth

·       Gender

·       Address

·       Phone number

·       E-mail address

·       Patient protocol number assigned to you

·       Payment, invoice and financial information

·       Private health insurance and Social Security Institution information

·       Biometric data within the scope of services financed by the Social Security Institution

·       Biometric and genetic data in general

·       Laboratory results

·       Test, analysis, and examination results

·       Medical examination data

·       Check-up information

·       Visual and audio data (PHOTOGRAPH, VIDEO, AUDIO RECORDINGS, IF ANY)

·       TELEPHONE RECORDINGS (IF THEY ARE STORED)

·       Prescription information and health data

·       Contact information of the person to be contacted in case of emergency (name-surname, T.R. ID number, address, phone number)

·       Any other data you share with us via postal mail, telephone, fax, e-mail, or other channels

1. Purposes for Processing Personal Data
The above-mentioned personal data may be processed within the scope described below:

·       Fulfillment of our legal obligations under the Fundamental Law on Health Services No. 3359; the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions; the Regulation on Private Health Institutions Providing Outpatient Diagnosis and Treatment; the Regulation on Processing and Protection of Personal Health Data, and other relevant legislation

·       Protection of public health, preventive medicine, medical diagnosis, conducting treatment and care services, planning and managing health services and financing

·       Providing you information regarding your appointment, if you have booked one

·       Planning and managing the internal operations of the Clinic

·       Conducting analyses for the purpose of improving our services

·       Carrying out invoicing

·       Verification of your identity

·       Verification of your relationship with contracted institutions

·       Providing information and responding to requests from the Ministry of Health or other public institutions in accordance with legislation

·       Responding to your questions or complaints regarding our services

·       Analyzing your use of health services to improve the services we provide

·       Ensuring compliance with the Clinic’s internal policies and principles

·       Measuring and improving patient satisfaction following the receipt of healthcare services

·       Contacting you for informational purposes regarding our services

·       Procuring medication or medical devices

·       Providing you information about new treatment methods

·       Planning and conducting corporate communication activities

·       Fulfilling information retention, reporting, and notification obligations required by legislation and regulatory authorities

·       Maintaining communication with patients and patient relatives

·       Sending celebratory or courtesy messages

·       Ensuring communication with relevant persons in emergency situations

2. Transfer of Personal Data

Your personal and special categories of personal data processed by the CLINIC for the purposes listed above may be transferred—within the framework of the basic principles under the Law on Protection of Personal Data (KVKK) and the conditions set forth in Articles 8 and 9 of KVKK—for the execution of the processes mentioned above, to:

·       Our business partners

·       Physicians we work with

·       Certified Public Accountants and Sworn-in CPAs who manage and audit the Clinic’s accounting

·       Authorized public institutions and organizations

·       Companies from which we receive support, consultancy, or services (including but not limited to Memorial and Florence Nightingale Hospitals, AC Dental, Meka Dental Laboratory, Batı Grup)

·       Independent audit firms within the framework of legal obligations

·       The Clinic’s attorneys

·       Judicial authorities or law enforcement agencies upon request as required by relevant legislation

·       The Ministry of Health’s Medical Information Management System, if deemed necessary

Additionally, documents obtained during the treatment process (photographs, videos, etc.) may be shared on social media platforms (Instagram, Facebook, Twitter, LinkedIn, YouTube, etc.) and on our website for public education purposes.

Personal and special categories of personal data may be transferred abroad with explicit consent, or without explicit consent only in cases permitted under Articles 5(2) and 6(3) of KVKK and in compliance with Article 9 regarding transfers abroad (adequate protection or written undertaking with permission of the Board).

3. Method, Legal Basis, and Retention Period for Collecting Personal Data
Your personal data may be collected through security camera recordings, telephone recordings, application forms, information you provide during treatment, tests conducted for treatment, laboratory results, and information received from public institutions and organizations.

Your data may be retained based on:

·       Your explicit consent,

·       A clear requirement in the legislation,

·       Necessity for the establishment or performance of a contract,

·       Necessity for the establishment, exercise, or protection of a right,

·       The Clinic’s legitimate interests, provided that your fundamental rights and freedoms are not harmed,

·       The need to comply with the Clinic’s legal obligations.

Your data will be retained throughout your treatment and for 10 years after the completion of your treatment.

4. Your Rights Under Article 11 of the Personal Data Protection Law (KVKK):
As a personal data owner, you have the right to:

·       Learn whether personal data is being processed

·       Request information if personal data has been processed

·       Learn the purpose of processing and whether the data is used for its intended purpose

·       Learn the third parties to whom your personal data is transferred domestically or abroad

·       Request correction of incomplete or inaccurate data

·       Request deletion or destruction of personal data when no longer needed

·       Request notification of correction/deletion to third parties to whom data has been transferred

·       Object to results arising from automated data analysis

·       Request compensation if you suffer damage due to unlawful data processing

You may submit your requests by completing the “Application Form to the Data Controller,” available at the Clinic or at www.erolcansiz.com, and delivering a signed copy by hand or via notary to:

Suadiye Mahallesi, Bağdat Caddesi, Akın Sokak No:3 D:1-2, Kadıköy, İstanbul

Your request will be processed free of charge within 30 days. Fees may apply if the response exceeds 10 pages or if provided on digital media, in accordance with regulatory guidelines.

By signing below, I acknowledge that I have read, understood, and been informed in detail about the processing of my personal data under this Information Text.

Date: …/…/20…
Patient / Relative (relationship degree)
Name–Surname:
T.R. ID No:
Signature:

EXPLICIT CONSENT DECLARATION
I have read and understood the Information Text prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 and have been informed in detail by the CLINIC as the data controller.

I hereby give my explicit consent for:

·       Processing, recording, storing, sharing, altering, updating, periodically checking, reorganizing, classifying, and preserving my personal and special categories of personal data for the purposes stated in the Information Text

·       Processing of the personal and special categories of personal data of my relatives whom I voluntarily designate

·       Transfer of such data to business partners, shareholders, authorized public institutions, service providers, independent audit firms, attorneys, judicial authorities, and law enforcement agencies

·       Transfer of my personal and special categories of personal data abroad for the purposes specified